Tech news

Security technology news

Headlines from leading security publications and research teams, refreshed automatically. Choose a category to narrow them.

Updated automatically every 6 hours. Last update 2 Nov 2026, 05:35 IST · 13 sources · Get these by email

Policy, regulation & law enforcement Studying Fraudulent North Korean IT WorkersResearchers set up a fake start-up company to study fraudulent North Korean IT workers. Schneier on Security · Global · 28 Oct 2026
Identity & access American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign ExposedModern phishing campaigns can compromise American businesses without relying on traditional credential theft. Attackers can abuse legitimate cloud services, authentication mechanisms, and trusted business workflows to gain access to corporate accounts while leaving fewer obvious signs behind.… The Hacker News · Global · 28 Oct 2026
AI security Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux ExploitsAn unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, the company said in its latest report. The exploits were built in the lab after the model was prompted, not seen in any real attack, and… The Hacker News · Global · 28 Oct 2026
Threats, ransomware & breaches FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money LaunderingThe U.S. Department of Justice (DoJ) on Tuesday announced the seizure of a domain associated with a bulletproof hosting provider (BPH) named Virtualine. The move was in response to the service being used to commit and facilitate prolific criminal activity, including "the advertisement of sexually… The Hacker News · Global · 28 Oct 2026
Policy, regulation & law enforcement Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud BreachJapan's GMO Internet Group is offering up to $1 million in total for tips that help catch the attackers who breached its Onamae.com Desktop Cloud service, after refusing to pay an extortion demand. The reward program opened on October 28 and pays only if a tip helps lead to an arrest or an… The Hacker News · Global · 28 Oct 2026
Threats, ransomware & breaches Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other ServersTailscale has released version 1.104.4 to fix flaws in its built-in SSH server that could let an attacker reach services and files on other servers that only the root user should be able to touch. The flaws are in how Tailscale SSH forwards network connections, a job the Tailscale background… The Hacker News · Global · 28 Oct 2026
Threats, ransomware & breaches ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained FlawsThe critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root is a server-side request forgery (SSRF)… The Hacker News · Global · 28 Oct 2026
Policy, regulation & law enforcement Third Serengeti Sweep Tops 1,400 Arrests as Investigations MatureInterpol's annual Operation Serengeti, now in its third iteration, led to 1,462 arrests across 20 African countries and the US, recovering $105 million in stolen funds. Dark Reading · Global · 28 Oct 2026
Applications & supply chain Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic EmergesThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli decoder library to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are… The Hacker News · Global · 28 Oct 2026
AI security 3 Frameworks to Protect CISOs & Orgs Against AI LiabilityCyber leaders can get ahead of AI liability with rigorous documentation, transparency, and smart contract negotiations with AI vendors. Dark Reading · Global · 27 Oct 2026
Threats, ransomware & breaches External Teams Chats Anchor 15-Minute Malware DeliveryMail bombing is getting a new look with a wide-scale, ongoing social engineering campaign that might be tied to the Black Basta ransomware gang. Dark Reading · Global · 27 Oct 2026
Applications & supply chain SBOMs Alone Can't Reveal the Scope of a Supply Chain AttackA recent Shai-Hulud attack shows defenders need real-time visibility into production code and affected services to respond to supply chain compromises. Dark Reading · Global · 27 Oct 2026
AI security CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan TargetsCybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator. TrendAI, which analyzed three exposed server environments used by threat… The Hacker News · Global · 27 Oct 2026
AI security Beware the Slasher: AI Could Kill Off Cybersecurity Pros' SkillsNathan Hamiel outlines potential SecOps horror in the AI midst, as core technical capabilities go the way of reading an atlas or remembering phone numbers. Dark Reading · Global · 27 Oct 2026
AI security 'Aokigahara' Stealer Targets 'Developer Keyrings' & AI AssistantsThe malware's focus on AI tools expands the traditional infostealer playbook to expose a forest of AI sessions, sensitive business data, and developer infrastructure from a single compromised endpoint. Dark Reading · Global · 27 Oct 2026
Vulnerabilities & exploits GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session DecryptionThe GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds that use the OpenSSL backend with mutual-TLS, where the server… The Hacker News · Global · 27 Oct 2026
Threats, ransomware & breaches Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPadsApple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that could result in arbitrary code execution when… The Hacker News · Global · 27 Oct 2026
AI security Hiding Capabilities in AI ModelsInteresting research: “AI Models Can Provably Hide Arbitrary Capabilities” Abstract: Capability evaluations aim to surface dangerous model behaviors before deployment, but their reliability depends on the assumption that hidden capabilities can be elicited. We show this assumption does not hold… Schneier on Security · Global · 27 Oct 2026
Threats, ransomware & breaches From federal SOCs to Talos: Ryan Fetterman on practical security researchWhat does it mean to be "blue collar" for the blue team? Ryan Fetterman discusses the realities of detection engineering, and shares his philosophy on building a career in security without burning out. Cisco Talos · Global · 27 Oct 2026
AI security Fuzzers vs. AI: Comparing Fuzzilli and BigSleep on JavaScript EnginesSummary Project Zero compared two automated tools used by Google to find vulnerabilities in Chrome’s JavaScript engine, V8, on a regular basis. Fuzzilli is a generative JavaScript engine fuzzer and BigSleep is an LLM-based bug finding system. In the past six months, BigSleep found more… Google Project Zero · Global · 27 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.